Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
25/09/2026, 17:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-25_f71a2ab14de811c1d6973fd9e5c438d5_amadey_elex_glassworm_hellokitty_icedid_ransomhub_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-25_f71a2ab14de811c1d6973fd9e5c438d5_amadey_elex_glassworm_hellokitty_icedid_ransomhub_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-09-25_f71a2ab14de811c1d6973fd9e5c438d5_amadey_elex_glassworm_hellokitty_icedid_ransomhub_remcos_smoke-loader_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-09-25_f71a2ab14de811c1d6973fd9e5c438d5_amadey_elex_glassworm_hellokitty_icedid_ransomhub_remcos_smoke-loader_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-09-25_f71a2ab14de811c1d6973fd9e5c438d5_amadey_elex_glassworm_hellokitty_icedid_ransomhub_remcos_smoke-loader_vidar.exe
- Size 4.8MB
- Sample260925-vm2khs1grb
- SHA256 d493089a4872226d87f03fac7341b14cc6344c72a4849adc517ae1a24bb43503
- MD5 f71a2ab14de811c1d6973fd9e5c438d5
- SHA1 a57db2bf490bd3af99dda03888d477eaf648f641
- SHA512 691f101ee5ecdbcef08a934927b5521457cafb6689fd0ef5fea9cba63087e55e48ca4cfbee955993365adfa51fb31322018cb48ed21f77a2fcf24a24844e2727
- SSDEEP 98304:NzIus6efPUIdoaxcp8wy5c3trGOlkQ5DUOgJY:NhfefPtHxcp9ym3nltDUJY
- TLSH T17936F141B3E256B6C4BF1678887A525AA770BC044315DBFB57C4B9796E333C08E323A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10